feat(platform): strengthen MCP governance and memory learning

[Luhaozhu]

Summary / 概述

This PR synchronizes the latest generated Community Edition tree from the private upstream.

• Strengthens MCP marketplace governance with administrator-managed credentials, explicit HTTP transport policy, and safer OAuth installation flows.
• Adds correction-aware multi-turn procedural memory so successful user corrections can become reusable guidance without retaining superseded behavior.
• Adds ontology capability gating and richer ontology harness coverage.
• Improves streaming segment ordering and adds a deterministic chat-stream regression test.
• Adds knowledge-base wiki and concept-graph views, prompt/runtime refinements, and bilingual documentation updates.

Commercial boundary: the ai_chain_information_mcp server, the corresponding Industry Knowledge Center plugin, their tests and generator, and their runtime configuration/metadata are intentionally excluded from this CE tree. Public documentation keeps only explicitly EE-labeled capability descriptions.

Related issue / 关联 Issue

None. This is a maintainer-generated upstream synchronization.

Type of change / 变更类型

• 📖 Documentation (document/**, README*.md)
• 🧩 Example / sample (examples/**)
• 🔧 Repo meta (CI, templates, .github/**)
• Other (please describe / 请说明): generated CE source synchronization

Checklist / 检查项

• My change only touches non-generated paths (docs / examples / repo meta). 仅改动非生成路径。
• Links and code snippets were verified. 链接与代码片段已验证。
• For bilingual docs, I updated both document/en/** and document/zh-CN/** where applicable. 双语文档已同步更新（如适用）。
• I read CONTRIBUTING.md. 我已阅读贡献指南。

Validation

• Full CE derivation checks: forbidden-path scan, brand scan, license-boundary scan, import/OpenAPI/ORM validation, CE release regressions, and frontend production build.
• Backend changed-suite validation: 189 passed, 1 skipped, 1 CE-only test deselected; focused post-boundary suite: 84 passed.
• Evaluation harness: 9 passed.
• Frontend deterministic stream test and production build passed.
• Additional path and runtime-text scans confirmed that the commercial MCP and plugin are absent.